PT-2007-1229 · Conti · Conti Ftpserver

Publicado 2007-01-23 · Atualizado 2017-07-29 · CVE-2006-6949

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Conti FTPServer version 1.0 Build 2.8

Description: The issue allows local users to obtain sensitive information by reading the MyServerSettings.ini file, which stores user passwords in cleartext.

Recommendations: For Conti FTPServer version 1.0 Build 2.8, consider encrypting or hashing user passwords to prevent them from being stored in cleartext, and restrict access to the MyServerSettings.ini file to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2006-6949

Produtos afetados

Conti Ftpserver

Referências · 6

• https://exchange.xforce.ibmcloud.com/vulnerabilities/30412 · Nota
• http://vupen.com/english/advisories/2006/4605 · Nota
• http://secunia.com/advisories/23030 · Aviso do Fabricante
• http://securityfocus.com/bid/21174 · Aviso do Fabricante
• http://secwatch.org/advisories/1016194 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2006-6949 · Nota de Segurança